<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18876">
<STYLE>@font-face {
font-family: 宋体;
}
@font-face {
font-family: Verdana;
}
@font-face {
font-family: @宋体;
}
@page Section1 {size: 595.3pt 841.9pt; margin: 72.0pt 90.0pt 72.0pt 90.0pt; layout-grid: 15.6pt; }
P.MsoNormal {
TEXT-JUSTIFY: inter-ideograph; TEXT-ALIGN: justify; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10.5pt
}
LI.MsoNormal {
TEXT-JUSTIFY: inter-ideograph; TEXT-ALIGN: justify; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10.5pt
}
DIV.MsoNormal {
TEXT-JUSTIFY: inter-ideograph; TEXT-ALIGN: justify; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"; FONT-SIZE: 10.5pt
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
FONT-STYLE: normal; FONT-FAMILY: Verdana; COLOR: windowtext; FONT-WEIGHT: normal; TEXT-DECORATION: none; mso-style-type: personal-compose
}
DIV.Section1 {
page: Section1
}
UNKNOWN {
FONT-SIZE: 10pt
}
BLOCKQUOTE {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em
}
OL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
UL {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</STYLE>
</HEAD>
<BODY style="MARGIN: 10px; FONT-FAMILY: verdana; FONT-SIZE: 10pt">
<DIV><FONT color=#000080 size=2 face=Verdana></FONT> </DIV>
<DIV><FONT color=#000080 size=2 face=Verdana></FONT> </DIV>
<DIV><FONT color=#000080 size=2 face=Verdana>nscd turned out to be very
helpful.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT color=#c0c0c0 size=2 face=Verdana>2010-06-11 </FONT></DIV><FONT
color=#000080 size=2 face=Verdana>
<HR style="WIDTH: 100px" align=left color=#b5c4df SIZE=1>
</FONT>
<DIV><FONT color=#c0c0c0 size=2 face=Verdana><SPAN>xufengnju</SPAN>
</FONT></DIV>
<HR color=#b5c4df SIZE=1>
<DIV><FONT size=2 face=Verdana><STRONG>发件人：</STRONG> Dan Burkland </FONT></DIV>
<DIV><FONT size=2 face=Verdana><STRONG>发送时间：</STRONG> 2010-06-10 21:49:38
</FONT></DIV>
<DIV><FONT size=2 face=Verdana><STRONG>收件人：</STRONG> CentOS mailing list
</FONT></DIV>
<DIV><FONT size=2 face=Verdana><STRONG>抄送：</STRONG> </FONT></DIV>
<DIV><FONT size=2 face=Verdana><STRONG>主题：</STRONG> Re: [CentOS] operation on
the client is slow when openldap serversare down </FONT></DIV>
<DIV><FONT size=2 face=Verdana></FONT> </DIV>
<DIV><FONT size=2 face=Verdana>
<DIV>________________________________________</DIV>
<DIV>From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of XUFENG</DIV>
<DIV>Sent: Thursday, June 10, 2010 3:54 AM</DIV>
<DIV>To: centos@centos.org</DIV>
<DIV>Subject: [CentOS] operation on the client is slow when openldap servers are down</DIV>
<DIV></DIV>
<DIV> </DIV>
<DIV>Hi List,</DIV>
<DIV> </DIV>
<DIV>OS: centos5.3 x86_64</DIV>
<DIV>OpenLDAP is installed using yum.</DIV>
<DIV> </DIV>
<DIV>I find that when all the ldap servers are down and offline, the operations on the client is slow.</DIV>
<DIV>When I try to do `ls` on the directories on the client as root, it waits there for some seconds.(root is not local account not via ldap)</DIV>
<DIV>But when I power on the openldap servers, it is much better.</DIV>
<DIV> </DIV>
<DIV>The configuration on the client:</DIV>
<DIV> </DIV>
<DIV>[root@xxxx ~]# cat /etc/ldap.conf </DIV>
<DIV>base dc=xxxx,dc=com</DIV>
<DIV>timelimit 1</DIV>
<DIV>bind_timelimit 1</DIV>
<DIV>nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm</DIV>
<DIV>uri ldaps://auth1.xa.xxxx.com:636 ldaps://auth2.xa.xxxx.com:636</DIV>
<DIV>ssl on</DIV>
<DIV>tls_checkpeer yes</DIV>
<DIV>tls_cacertdir /etc/openldap/cacerts</DIV>
<DIV>tls_cacertfile /etc/openldap/cacerts/cacert.pem</DIV>
<DIV>pam_password md5</DIV>
<DIV>bind_policy soft</DIV>
<DIV> </DIV>
<DIV>[root@xxxx ~]# cat /etc/openldap/ldap.conf </DIV>
<DIV>URI ldaps://auth1.xa.xxxx.com:636 ldaps://auth2.xa.xxxx.com:636</DIV>
<DIV>BASE dc=xxxx,dc=com</DIV>
<DIV>TLS_CACERTDIR /etc/openldap/cacerts</DIV>
<DIV>TLS_CACERT /etc/openldap/cacerts/cacert.pem</DIV>
<DIV>TLS_REQCERT demand</DIV>
<DIV> </DIV>
<DIV>[root@xxxx ~]# cat /etc/nsswitch.conf </DIV>
<DIV>passwd: files ldap</DIV>
<DIV>shadow: files ldap</DIV>
<DIV>group: files ldap</DIV>
<DIV>hosts: files dns</DIV>
<DIV>bootparams: nisplus [NOTFOUND=return] files</DIV>
<DIV>ethers: files</DIV>
<DIV>netmasks: files</DIV>
<DIV>networks: files</DIV>
<DIV>protocols: files</DIV>
<DIV>rpc: files</DIV>
<DIV>services: files</DIV>
<DIV>netgroup: files ldap</DIV>
<DIV>publickey: nisplus</DIV>
<DIV>automount: files ldap</DIV>
<DIV>aliases: files nisplus</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Any suggestions?</DIV>
<DIV>________________________________________</DIV>
<DIV></DIV>
<DIV>I don't know for sure if this will help any but have you tried nscd to cache results? </DIV>
<DIV></DIV>
<DIV>-Dan</DIV>
<DIV>_______________________________________________</DIV>
<DIV>CentOS mailing list</DIV>
<DIV>CentOS@centos.org</DIV>
<DIV>http://lists.centos.org/mailman/listinfo/centos</DIV>
<DIV></DIV></FONT></DIV></BODY></HTML>